Senior Auditor, Technology - Global Audit & Enterprise Risk Management

About the role

This position is designated as a hybrid role based out of our headquarters near Portland, Oregon. The current expectation is for employees to work onsite four days per week, subject to change based on business needs.

Responsibilities

• Deliver on Strong Cybersecurity Skillsets: Perform cybersecurity audits against core frameworks and collaborate with technical teams to deliver clear, actionable findings and recommendations.
• Technology Risk Assessment & Planning: Lead cybersecurity-focused risk assessments and contribute to audit planning to proactively identify and mitigate emerging cyber threats across global operations.
• Deliver High-Impact Audits: Execute audits with a primary focus on cybersecurity, including identity and access management, cloud security, data protection, IT governance, and system development.
• Enterprise Risk Management: Execute deep-dive testing and analysis of cybersecurity and enterprise technology risks, driving mitigation strategies aligned with business objectives.
• Evaluate Controls Against Best Practices: Assess cybersecurity controls against leading frameworks (NIST CSF, ISO 27001, COBIT, CIS Controls) to ensure resilience and effectiveness.
• Collaborate on Emerging Technology: Stay current on trends in AI, cloud, cybersecurity, and digital commerce risks, supporting safe and secure adoption of innovative technologies.
• Communicate with Impact: Deliver clear, concise, and impactful insights to leadership in a timely and effective manner.

Requirements

• You are a cybersecurity-focused professional passionate about protecting digital ecosystems and managing evolving threats.
• A strong analytical thinker who can translate complex technical risks into practical business insights.
• A collaborative partner who builds effective relationships across audit, risk, and technology teams.
• A clear and confident communicator who can influence stakeholders at multiple levels.
• Curious and forward-looking, with a continuous learning mindset around emerging threats and technologies.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field; or business degree with significant IT risk experience.
• 4+ years of progressive experience in cybersecurity audit, technology risk, or information security.
• Strong, hands-on experience evaluating and testing cybersecurity controls and frameworks (NIST, ISO, CIS Controls; not just exposure).
• Experience performing cybersecurity audits in complex enterprise environments, including areas such as IAM, cloud security, or data protection.
• Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.
• Relevant certifications such as CISA, CISSP, CISM, CRISC, CEH, or CompTIA Security+.

Skills

• Strong analytical skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Knowledge of cybersecurity frameworks and standards.
• Experience with auditing tools and techniques.
• Understanding of cloud computing and digital commerce.

Benefits

At Columbia Sportswear Company, we offer a comprehensive benefits package that includes:

• 401(k) plan with company match.
• Medical, dental, and vision insurance.
• Life insurance and disability coverage.
• Flexible spending accounts.
• Health savings account.
• Voluntary benefit offerings (accident, critical illness, hospital indemnity, and legal services).
• Employee assistance program (EAP).
• Wellness benefits.
• Employee discounts.
• Generous time off policy.

Pay

The salary range for this position is $80,000 - $120,000 annually, depending on experience and qualifications.

Schedule

This role is a hybrid position, requiring employees to work onsite four days per week, with flexibility based on business needs.